Static task
static1
Behavioral task
behavioral1
Sample
PURCHASE OREDER.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
PURCHASE OREDER.exe
Resource
win10v2004-20230915-en
General
-
Target
092ace14cbbd6e19ad049d8c757e41e583cceb2ddd57e0e00e40f1f1e1aff44a_JC.rar
-
Size
480KB
-
MD5
5b2400ca3ed661c4e46b69bfd156f65d
-
SHA1
bfa76e5351e522b7db90c6ff5bcd4555aa3a25c5
-
SHA256
092ace14cbbd6e19ad049d8c757e41e583cceb2ddd57e0e00e40f1f1e1aff44a
-
SHA512
c96e1afbfea3d8bacd97545b646b40195d7e6d411cb0dc81540826ed2e35afe0c3e6a3725c05c5c230d30097f06ebfbed47493acb77a05472a4efc82067ba870
-
SSDEEP
12288:XO2GqJDRq/KJeVHCvK83p72i1NDFmTbTh27hqhC4TlxGk:XSq1PJWU3Z2eql2mdJ9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PURCHASE OREDER.exe
Files
-
092ace14cbbd6e19ad049d8c757e41e583cceb2ddd57e0e00e40f1f1e1aff44a_JC.rar.rar
-
PURCHASE OREDER.exe.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 569KB - Virtual size: 569KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ